Buying a domain from Django
A 1990s XML protocol, an MD5-of-MD5 signature, a DOCTYPE you must not parse naively, and calls that debit an account. What the wrapper has to get right.
Certificates for domains that do not exist yet
Caddy issues a certificate at the first handshake for a name it has never seen. Without the right ask endpoint, that is a free certificate mint for anyone.
A DNS zone you can only write whole
SET_DNS_ZONE replaces everything. That one constraint decides where truth lives, how you delete a record, and why the mail block is published late.